mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
2518 commits 15 branches 540 tags 276 MiB
Commit graph

2518 commits

This branch
This branch
All branches
Author SHA1 Message Date
NoSkillGirl
e5f5ef9db1 split multi yaml in crd 2020-08-31 18:20:25 +05:30
NoSkillGirl
6b6897f6e2 working version of CRD validation for CLI 2020-08-31 18:19:09 +05:30
NoSkillGirl
b61412ca7a minor validation changes 2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c small issue while resolving conflicts 2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc validation of policy against crd 2020-08-31 18:15:39 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels (#1060) 
* resolved conditional anchor issue and added validation to pattern labels

* restored IsConditionAnchor

* added annotation and anypattern validation

* added conditional anchor key checker

* reverted docs

* fixed tests

* modified validation

* modified validate condition check
 2020-08-28 18:22:22 -07:00
Michael Barrientos
b067f41d02
Replace Policy CRD AnyValue fields with empty dict (#1086) 
/kind cleanup

\## Proposed change

This implements the same change as #1047, except for the new Policy CRD instead of the ClusterPolicy CRD, which apparently did not get those updates before merging.

When deploying Kyverno using Argo CD, we get a persistent false diff for the Policy custom resource definition (the definition itself, not instances of Policy), because Kubernetes converts the invalid AnyValue: {} property types to just an empty dict {}. Since the Kubernetes server makes this change to {} unilaterally after applying, when a diffing tool like Argo CD compares it against the YAML manifest, each such instance of AnyValue appears as a diff.

I know that since AnyValue is not part of the official OpenAPI V3 schema, and that when you run kubectl get crd policies.kyverno.io -o yaml the status message shows Kubernetes complaining about "Required value: must not be empty for specified object fields" for all of these fields. In theory the correct solution would be to somehow provide a full schema, but I know this can be tricky for these data/anyPattern/patches types, but at the minimum, I would like to get Argo CD to believe that there are no changes that need to be applied.

Since these fields are already silently turned into {} by Kubernetes, this should have no functionality change on existing code/deployments.
 2020-08-26 11:11:36 -07:00
Yuvraj
b648c2edd6
Events take several minutes to show on the resource (#1083) 
* git action added

* changed retry method

* remove time method

* increase worker for event generator
 2020-08-26 14:28:34 +05:30
shuting
513f5ec898
add watch policy to clusterrole kyverno:customresources (#1084) 2020-08-24 12:27:16 -07:00
Pooja Singh
8105e4cad8
Allowing only few variables in the policies (#1063) 
* Checking for non whitelisted variables in the policy

* method name change

* small issue while rebasing
 2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables 
Feature/add cli variables
 2020-08-22 01:48:40 +05:30
NoSkillGirl
067d51cb28 resolving issues after rebase 2020-08-22 01:21:29 +05:30
Mohan B E
3feb41e5f3
wildcard for numeric values (#1074) 
* wildcard for numeric values

* changed error message
 2020-08-21 12:48:05 -07:00
NoSkillGirl
b3a13cd36b updated readme - apply example 2020-08-22 01:07:04 +05:30
NoSkillGirl
492b0636c2 updated readme 2020-08-22 01:07:04 +05:30
NoSkillGirl
3a3311835c added error handling 2020-08-22 01:07:04 +05:30
NoSkillGirl
df154537f1 Added provision to pass cli values from a file 2020-08-22 01:07:04 +05:30
NoSkillGirl
e18deb94f2 updated readme 2020-08-22 01:07:04 +05:30
NoSkillGirl
0927e7a732 added validation for set flag 2020-08-22 01:07:03 +05:30
NoSkillGirl
11e73381cf removed comments 2020-08-22 01:07:03 +05:30
NoSkillGirl
afe98bb93c Added set flag 2020-08-22 01:07:03 +05:30
Yuvraj
1b7a295860
git action added (#1078) 2020-08-21 12:24:02 -07:00
Shuting Zhao
1371da939b tag v1.1.10 2020-08-21 11:12:55 -07:00
Pooja Singh
2717a03ab2
Not checking for cluster resources for CLI in policy validate (#1076) 2020-08-21 23:07:54 +05:30
Mohan B E
4c7ae3f5f7
added helm chart icon (#1077) 2020-08-21 09:46:04 -07:00
Yuvraj
06148a58c5
cli docker images added (#1073) 
* cli docker images added

* cli docker images added
 2020-08-21 09:45:04 -07:00
Jim Bugwadia
feef1400e3
Merge pull request #1072 from realshuting/bugfix 
return early in CLI if generated patches from policy mutation is nil
 2020-08-19 15:19:12 -07:00
Shuting Zhao
0aeb9f667a return early in LCI if generated patches from policy mutation is nil 2020-08-19 15:11:21 -07:00
Jim Bugwadia
3fb1c8e87e
add validateFailureAction to all policies (#1068) 2020-08-19 14:04:58 -07:00
Mohan B E
f60deecdce
Feature/namespaced policy 280 (#1058) 
* namespaced policy crd and cache

* modified main.go

* removed kyverno

* implemented policy violation generator for namespaced policy on audit

* modified cache

* added validation for cluster resource types

* install.yaml

* install.yaml

* removed namespaces from crd and refactored code

* modified NamespacePolicy to Policy

* added ClusterRole aggregate for policies

* modified clusterrole
 2020-08-19 09:07:23 -07:00
Jim Bugwadia
64d1ee7a9d
Merge pull request #1067 from nirmata/bugfix/fix_disallow_add_capabilities 
fix policy
 2020-08-19 08:59:07 -07:00
Yuvraj
3799b52fc8
[BUG] filterK8Resources is not correctly configured using ConfigMap (#1059) 
* configmap issue fixed

* fixed e2e test

* helm template file added

* remove extra check

* string empty check removed
 2020-08-19 13:46:08 +05:30
Jim Bugwadia
66b660d717 fix policy 2020-08-19 01:08:53 -07:00
Jim Bugwadia
dbd35831c1
Merge pull request #1064 from nirmata/bugfix/improve_cli_reports 
Bugfix/improve cli reports
 2020-08-18 22:27:53 -07:00
Jim Bugwadia
e6a3aea88a fix print 2020-08-18 21:56:43 -07:00
Jim Bugwadia
550f9d89b4 update policy markdowns 2020-08-18 21:44:11 -07:00
Jim Bugwadia
23fd317eee turn off auto-gen policies for add new capabilities 2020-08-18 21:41:15 -07:00
Jim Bugwadia
1235e922df add newline 2020-08-18 21:40:47 -07:00
Jim Bugwadia
293281596b fix disallow root user policy 2020-08-18 21:03:38 -07:00
Jim Bugwadia
fc6da9c9e6 improve CLI validation reports 2020-08-18 21:03:00 -07:00
Pooja Singh
5a68653749
Supporting annotations in match/exclude (#1045) 
* Supporting annotations in match/exclude filters

* updated readme

* small fix
 2020-08-17 17:12:27 -07:00
shuting
db342d0ece
Improvements in webhook (#1057) 
* remove empty flag

* format code

* revert change in install.yaml

* -  skip mutation for a deleting resource - add debug log

* format code

* revert change in install.yaml

* -  skip mutation for a deleting resource - add debug log
 2020-08-17 11:17:07 -07:00
shuting
fd2661dfce
update mutation jsonPatch doc (#1049) 2020-08-14 14:48:08 -07:00
shuting
d6062fdd47
Add go fmt (#1055) 
* remove empty flag

* format code

* revert change in install.yaml
 2020-08-14 12:21:06 -07:00
Yuvraj
4ee523dccf
default exclude group role (#1052) 2020-08-13 14:30:25 -07:00
Yuvraj
6c174b19d1
Update the doc on how excluded userInfo flags (#1035) 
* flags description added in documentation

* added exclude group role

* small docs changes
 2020-08-13 11:59:17 -07:00
Michael Barrientos
d2ac5b829b
Replace CRD AnyValue fields with empty dict (#1047) 2020-08-13 11:57:35 -07:00
shuting
0794084b4d
1040 automate release (#1044) 
* add release in make

* update release in Makefile

* update README.md
 2020-08-12 07:54:45 -07:00
Yuvraj
632d1fc226
kyverno-cli and helm release step added in workslow (#1043) 
* e2e test added in release

* added steps

* dirty added in hash

* new make command added

* dirty remove from make

* a new step added
 2020-08-11 10:04:25 -07:00
Yuvraj
c236a3a48a
Added e2e test in release (#1042) 
* e2e test added in release

* added steps

* dirty added in hash

* new make command added

* dirty remove from make
 2020-08-11 09:32:51 -07:00